Senior Manager, Operational Technology Security

SANDISK; Batu Kawan; On-site; MYR 347,000 - 491,000; Full time

Job summary

A leading multinational corporation in Penang is seeking a Senior Manager of Operational Technology Security to lead their OT visibility and resilience program in high-tech manufacturing. This role is pivotal in defining the OT security roadmap, overseeing monitoring platform installations, and ensuring seamless integration with IT systems. The ideal candidate will have at least 10 years in OT security with a strong background in semiconductor manufacturing. The company promotes diversity and offers inclusive opportunities.

Benefits

Diversity and Inclusion programs

Opportunities for accommodations for disabilities

Qualifications

• Minimum 10 years in OT/ICS security or manufacturing network engineering.
• At least 5 years in a leadership role.
• Experience in semiconductor or advanced electronics manufacturing environments.

Responsibilities

• Lead OT visibility and resilience program across manufacturing sites.
• Define and execute OT security roadmap, aligning with corporate cybersecurity.
• Oversee installation of OT monitoring platforms for maximum visibility.

Skills

Leadership & Communication

Risk & Compliance

Technical Expertise

Network Skills

High-Tech Manufacturing Expertise

Tools

Wireshark

Nozomi Networks

Claroty

Dragos

Armis

Job description

Senior Manager, Operational Technology Security

We’re hiring a Senior Manager of Operational Technology (OT) to lead Sandisk’s OT visibility and resilience program across high‑technology manufacturing sites. You’ll stand up and mature our OT monitoring solution, integrate telemetry into our SIEM, and partner with factory operations to ensure security without disrupting production.

This role owns strategy, delivery, and ongoing operations of OT security—bridging engineering, manufacturing, and the SOC—so that Sandisk maintains continuous production with zero downtime due to internal cybersecurity incidents.

Program Leadership: Define and execute the OT security roadmap, aligning with corporate cybersecurity strategy and manufacturing uptime objectives.

OT Monitoring Deployment: Oversee installation and configuration of OT monitoring platforms such as Nozomi Networks, Claroty, Dragos, Armis, ensuring proper sensor placement for maximum visibility.

Traffic Analysis & Protocol Coverage: Implement tools for deep packet inspection and protocol analysis (e.g., Wireshark, Zeek, Suricata) to monitor Modbus, Profinet, DNP3, OPC‑UA, and other industrial protocols.

SIEM Integration: Collaborate with SOC and architecture teams to stream OT telemetry into SIEM/SOAR platforms, develop detection logic, and optimize alerting to reduce false positives.

Asset & Risk Management: Establish and maintain a comprehensive OT asset inventory, vulnerability management process, and configuration baselines for critical systems.

Network Segmentation & Access Control: Drive segmentation projects, firewall rule reviews, and identity separation between IT and OT environments; implement secure remote vendor access protocols.

Incident Response & Resilience: Develop OT‑specific incident response playbooks, conduct tabletop exercises, and ensure disaster recovery plans meet manufacturing continuity requirements.

Compliance & Standards: Ensure adherence to NIST CSF, IEC 62443, and corporate security policies; prepare for internal and external audits.

Cross‑Functional Collaboration: Work closely with onsite IT teams and Manufacturing leadership to schedule changes, minimize production impact, and jointly achieve zero‑downtime objectives.

Metrics & Reporting: Define KPIs (e.g., telemetry coverage, MTTR, segmentation compliance) and deliver executive‑level reporting on OT security posture.

Qualifications

Required:

Experience: Minimum 10 years in OT/ICS security, industrial control systems, or manufacturing network engineering, with at least 5 years in a leadership role.

High‑Tech Manufacturing Expertise: Proven experience in semiconductor or advanced electronics manufacturing environments, understanding production constraints and uptime requirements.

Technical Expertise: Deep knowledge of OT protocols (Modbus, Profinet, DNP3, OPC‑UA), PLC/SCADA systems, and sensor deployment strategies.

Security Tools: Hands‑on experience with OT monitoring platforms (Nozomi, Claroty, Dragos, Armis) and integration with SIEM/SOAR solutions.

Network Skills: Proficiency in configuring SPAN/RSPAN/ERSPAN, packet capture, and traffic analysis using tools like Wireshark or Zeek.

Risk & Compliance: Familiarity with NIST CSF, IEC 62443, and MITRE ATT&CK for ICS frameworks; experience conducting risk assessments and implementing compensating controls for legacy systems.

Skills:

Leadership & Communication: Proven ability to lead cross‑functional teams, manage vendors, and communicate effectively with technical and executive stakeholders.

Preferred:

Credential segregation between IT and OT domains; knowledge of OT vulnerability management tools.

Additional Information

Sandisk thrives on the power and potential of diversity. As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within. We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution.

Sandisk is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at [e-mail] to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.

NOTICE TO CANDIDATES: Sandisk has received reports of scams where a payment is requested on Sandisk’s behalf as a condition for receiving an offer of employment. Please be aware that Sandisk and its subsidiaries will never request payment as a condition for applying for a position or receiving an offer of employment. Should you encounter any such requests, please report it immediately to Sandisk Ethics Helpline or email [e-mail] .